ASA VPN Clustering

[ericdavis]

I have 4 VPN HA-pairs in 4 different geographic regions in the world.  Does Cisco ASA support clustering more than 2 VPN servers?  Since the AnyConnect client does not seem to have the ability to store connection profiles like the old IPSec client I need a way to provide 1 hostname that will be used for all 4 VPN servers.  Any suggestions?

Eric

[Philip D'Ath · Accepted solution]

You are going to be very happy.  Read this.

https://supportforums.cisco.com/document/58711/anyconnect-optimal-gateway-selection-operation

In short, AnyConnect can store profiles.  However it is better to create the same profile and store it on each VPN cluster and let users pull it on their next connect.

On modern Windows OS's the XML profile is stored in:

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile

[ericdavis]

I know it's a while later, but thank you for this reply.  It helped me a lot.

Eric